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INTROBUCTION (U) 

One of the greatest challenges the United States faces in the ongoing conflict with | 
mH is finding operatives of the enemy. As this Court is aware, one of the most significant 
toots that the U.S. Government can use to accomplish that task is metadata analysis. Under this 
Court’s order 

Opinion and Order, No. PR/TT 
subsequent related authorizations, the National Security Agency (NS A) is currently collecting 
metadata in bulk from electronic communications and applying sophisticated analytic tools to 
identify and find The attached Application seeks this Court’s authorization 

to collect in bulk certain business 

records— call detail records, or "telephony metadata 75 — so that the NS A may use these same 




analytic tools to identify and find operatives of 



(TS//SI//NF ) 



The attached Application for business records is made pursuant to title V of the Foreign 
Intelligence Surveillance Act, 50U.S.C. § 1861 etseq., as amended, “Access to Certain Business 
Records for Foreign Intelligence Purposes, 55 to capitalize upon the unique opportunities the 
United States has for identifying communications The collection 

sought here will make possible a potentially powerful tool that the Government has to discover 
enemy communications: metadata analysis. For telephone calls, metadata essentially consists of 
routing information that includes the telephone number of the calling party*, the telephone 
number of the called party, and the date, time and duration of the call, It does not include the 
substantive content of the communication or the name, address, or financial information of a 
subscriber or customer. Relying solely on such metadata, the Government can analyze the 
contacts made by a telephone number reasonably suspected to be associated with a terrorist, and 
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thereby possibly identify other, previously unknown, terrorists. The primary advantage of 
metadata analysis as applied to telephony metadata is that it enables the Government to analyze 

past connections That analysis is possible, however, only if the 

Government hag collected and archived a broad set of metadata that contains within it the subset 
of communications that can later be identified as terrorist-related. In addition, individually 



targeted collection of metadata is inadequate for tracking the communications of terrorists who 




detail records” that contain routing information, including which telephone number called which 
other telephone number at what date and time, and for how long, Le., “metadata.” The 



Application fully satisfies ail requirements of title V of FISA. In particular, the Application 
seeks the production of tangible things “for” an international terrorism investigation. 50 U.S.C. 

§ 1861(a)(1). In addition, the Application includes a statement of facts demonstrating that there 
are reasonable grounds to believe that the business records sought are “relevant” to an authorized, 
investigation. Id. § 1861(b)(2). Although the call detail records 

contain large volumes of metadata, the vast majority of which will not be terrorist- 
related, the scope of the business records request presents no infirmity under title V. All of the 
business records to be collected here are relevant to FBI investigations into because the 

NSA can effectively conduct metadata analysis only if it has the data in bulk. (TS//SI//NF ) 
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In addition, even if the metadata from non-terrorist communications were deemed not 
relevant, nothing in title V of FISA demands that a request for the production of “any tangible 
things” under that provision collect only information that is strictly relevant to the international 
terrorism investigation at hand. Were the Court to require some tailoring to fit the information 
that will actually be terrorist-related, the business records request detailed in the Application 
would meet any proper test for reasonable tailoring. Any tailoring standard must be informed by 
a balancing of the government interest at stake against the degree of intrusion into any protected 
privacy interests. Here, the Government’s interest is the most compelling imaginable: the 
defense of the Nation in wartime from attacks that may take thousands of lives. On the other 
side of the balance, the intrusion is minimal. As the Supreme Court has held, there is no 
constitutionally protected interest in metadata, such as numbers dialed on a telephone. Any 
intrusion is further reduced because only data connected to telephone numbers reasonably 
suspected to be terrorist-associated will ever be viewed by any human being. Indeed, only a tiny 
fraction (estimated by the NS A to be 0.000025% or one in four million) of the call detail records 
collected actually will be seen by a trained NSA analyst. Under the procedures the Government 
will apply, metadata reflecting the activity of a particular telephone number will only be seen by 
a human analyst if a computer search has established a connection to a terrorist-associated 
telephone number. ( TS//SJ7/NF ) 

The Application is completely consistent with this Court’s ground breaking and 
innovative decision In that case, the Court authorized the 

installation and use of pen registers and trap and trace devices to collect bulk e-mail metadata 

The Court found that all of “the information likely to be 
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obtained 5 ' from such collection “is relevant to an ongoing investigation to protect against 
international terrorism,” 50U.S.C. § 1 842(c)(2); 31 25-54, The Court explained 

that “the hulk collection of meta data — i.e., the collection of both a huge volume and high 
percentage of unrelated communications—- is necessary to identify the much smaller number of J 
^^^^^^^communications,” Id, at 49. Moreover, as was the case this 

Application promotes both of the twin goals of FISA; facilitating the foreign-intelligence 
collection needed to protect American lives while at the same time providing judicial oversight 
to safeguard American freedoms. (Sj 

BACKGROUND (U) 

A. The A! Qaeda Threat (§) 

On September 1 1 , 2001, the al Qaeda terrorist network launched a set of coordinated 
attacks along the East Coast of the United States. Four commercial jetliners, each carefully 
selected to be fully loaded with fuel for a transcontinental flight, were hijacked by al Qaeda 
operatives. Two of the jetliners were targeted at the Nation’ s financial center in New Y ork and 
were deliberately flown into the Twin Towers of the World Trade Center. The third was targeted 
at the headquarters of the Nation’s Armed Forces, the Pentagon. The fourth was apparently 
headed toward Washington, D.C., when passengers struggled with the hijackers and the plane 
crashed in Shanksv tile, Pennsylvania. The intended target of this fourth jetliner was evidently 
the White House or the Capitol, strongly suggesting that its intended mission was to strike a 
direct blow at the leadership of the Government of the United States. The attacks of September 
1 1th resulted in approximately 3,000 deaths — the highest single-day death toll from hostile 
foreign attacks in the Nation’s history. These attacks shut down air travel in the United States, 
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disrupted the Nation's financial markets and government operations, and caused billions of 
dollars in damage to the economy. (0) 

Before the September 11th attacks, al Qaeda had promised to attack the United States. In 
1998, Osama bin Laden declared a “religious” war against the United States and urged that it 
was the moral obligation of all Muslims to kill U.S. civilians and military personnel. See 
Statement of Osama bin Laden, Ayman al-Zawahiri, et al, Fatwah Urging Jihad Against 
Americans ; published in ALQuds al- ! Arabi (Feb. 23, 1998) (“To kill the Americans and their 
allies — civilians and military — is an individual duty for every Muslim who can do it in any 
country in which it is possible to do it, in order to liberate the al- Aqsa Mosque and the holy 
mosque from their grip, and in order for their armies to move out of all the lands of Islam, 
defeated and unable to threaten any Muslim”). Al Qaeda carried out those threats with a 
vengeance; they attacked the U.S.S. Cole in Yemen, the United States Embassy in Nairobi, and 
finally the United States itself in the September 1 1th attacks, (U) 

It is clear that al Qaeda is not content with the damage it wrought on September 1 1th. 
lust a few* months ago, Osama bin Laden pointed to "the explosions that , . . have take[n] place 
in the greatest European capitals” as evidence that “the mujahideen . . . have been able to break' 
through all the security measures taken by” the United States and its allies. Osama bin Laden, 
audiotape released on Al-Jazeera television network (Federal Bureau of Investigation trans., Jan. 
19, 2006). He warned that “the delay of [sic] inflicting similar operations in America has not 
been due to any impossibility of breaking through your security measures!)] for those operations 
are underway and you will see them in your midst as soon as they are done,” Id Several days 
later, bin Laden's deputy, Ayman al-Zawahiri, warned that the American people are destined for 
“a future colored by blood, the smoke of explosions and the shadows of terror.” Ayman al- 
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Zawahiri, videotape released on the Al-Jazeera television network (Jan.. 30, 2006). These recent 
threats were just the latest in a series of warnings since September 1 1th by al Qaeda leaders who 
have repeatedly promised to deliver another, even more devastating attack on America. See, e.g, 
Osama bin Laden, videotape released on Al-Jazeera television network (Oct. 24, 2004) (warning 
United States citizens of further attacks and asserting that “your security is in your own hands”); 
Osama bin Laden, videotape released on Al-Jazeera television network (Oct. 18, 2003) (“We, 
God willing, will continue to fight you and will continue martyrdom operations inside and 
outside the United States , . . .”); Ayman al-Zawahiri, videotape released on the Al-Jazeera • 
television network (Oct. 9, 2002) (“I promise you [addressing the ‘citizens of the United States’] 
that the Islamic youth are preparing for you -what will fill your hearts with horror”). As recently 
as December 7, 2005, al-Zawahiri professed that al Qaeda “is spreading, growing, and becoming 
stronger,” and that al Qaeda is “waging a great historic battle in Iraq, Afghanistan, Palestine, and 
even in the Crusaders’ own homes.” Ayman al-Zawahiri, videotape released on Al-Jazeera 
television network (Dec. 7, 2005). Indeed, since September 1 1th, al Qaeda has staged several 
large-scale attacks around the world, including in Tunisia, Kenya and Indonesia, killing hundreds 
of innocent people. In addition, Ayman al-Zawahiri claimed that al Qaeda played some role in 
the July 2005 attacks on London. See Declaration of John S. Redd, Director, National 
Counterterrorism Center f 3 5 (May 22, 2006) (Exhibit B to the Application) (“NCTC 
Declaration”). Given that al Qaeda’s leaders have repeatedly made good on their threats and that 
al Qaeda has demonstrated its ability to insert foreign agents into the United States to execute 
attacks, it is clear that the threat continues. ( TS/SI//NP ) 

Reliable intelligence indicates that remains intent on striking the United States 

and U.S. interests. See NCTC Declaration fl 5-7, 8, 11-13. an international 
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organization with a global presence, with members located in at least 40 countries, and the 
capability to strike US interests anywhere in the world.” Id. ^ 5. Indeed, “continues its 

efforts to reconstitute communication links to a transnational network of ^^^^Jpersonnel and 
affiliated groups” Id. f 39. Recent intelligence suggests that has become “keenly” 

interested in soft targets, especially those that are densely populated. Id. f§ 17, 75, 
and its affiliates consistently have expressed an interest in attacking U.S. rail and mass transit 
systems, as well as continuing to target the civil aviation sector, including U.S. passengers and 
Western aircraft overseas. Id. 74-80, Moreover, the Intelligence Community is concerned 
that the next attack in the United States might use chemical biological, radiological or 

nuclear weapons, “especially given clear intent to develop such capabilities and use 

them to strike the Homeland.” Id. f 81. In sum, continues to present “a credible threat 

for a massive attack against the US Homeland.” Id. f 91. By helping to find and identify 

particularly those who are already within the 

United States, the proposed request for business records would greatly help the United States 
prevent another such catastrophic terrorist attack, one itself has claimed would be 

larger than the attacks of September 1 1th. (TS//Sk/HCS//OC,NF ) 

B. Use of Telephones to Communicate (S) 

use the International telephone system to 
communicate with one another between numerous countries all over the world, including to and 
from the United States. In addition, when they are located inside the United States, | 

domestic U.S. telephone calls. Tor purposes of preventing terrorist attacks 
against the United States, the most analytically signiftcan^^^^^telephone communications 
are those that either have one end in the United States or that are purely domestic, because those 
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commuaicatioas are particularly likely to identify individuals who are associated with 
in the United States whose activities may include planning attacks on the homeland. See 
Declaration of Lieut Gen. Keith B. Alexander, U.S. Army, Director, NSA| 5 (May 22, 2006) 
(Exhibit A to the Application) (“NS A Declaration’). The vast majority of the call detail records 
sought in the attached Application would include records of telephone calls that either have one 
end in the United States or are purely domestic, including local calls, although some records 
would relate to communications in which both ends were outside the United States. The United 
States needs to sort through this telephony metadata to find and identify and 

thereby acquire vital intelligence that could prevent another deadly terrorist attack. (TS//SL/HF) 
C. Discovering the Enemy: Metadata Analysis (TS//SI//NF) 

Analyzing metadata from international and domestic telecominunicatioris-~such as 
information showing which telephone numbers have been in contact with which other telephone 
numbers, for how long, and when 1 — can be a powerful tool for discovering communications of 
terrorist operatives. Collecting and archiving metadata is thus the best avenue for solving the 
following fundamental problem; although investigators do not know exactly where the terrorists’ 
communications are hiding in the billions of telephone calls flowing through the United States 
today, we do know' that they are there, and if we archive the data now, we will be able to use it 
in a targeted way to find the terrorists tomorrow. NSA Declaration f§ 7-1 1. As the NSA has 
explained, “[t]he ability to accumulate a metadata archive and set it aside for carefully controlled 



1 For telephone calls, “metadata” includes comprehensive corrmnmications routing information, including 
the telephone number of the calling party, the telephone number of the called party, and the date, time and duration 
of tire calf as well as communications device and trunk identifiers. A "trunk" is a communication line between two 
switching systems. Newton '$ Telecom Dictionary S53 (20th ed_ 2004), Telephony metadata does not include the 
content of the cctnmunication, as defined bj' 18U.S.C. § 2510(8), or the name, address, or financial Mormation of a 
subscriber or customer. (S) 
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searches and analysis will substantially increase NSA’s ability to detect and identify members of 
al Qaeda and its affiliates ” Id. f 8; see at 43-45. (TS//SI//NF ) 

Collecting and archiving metadata offers at least two invaluable capabilities to analysts 
that are unavailable from any other approach. First, it allows for retrospective “contact 
chaining.” For example, analysts may learn that a particular telephone number is associated with 
^^^1 perhaps because it was found in the cell phone directory of a recently captured HI 
agent. By examining metadata that has been archived over a period of time, analysts can 
search to find the contacts that have been made by that “seed” telephone number. The ability to 
see who communicates with whom may lead to the discovery of other terrorist operatives, may 
help to identify hubs or common contacts between targets of interest who were previously 
thought to be unconnected, and may help to discover individuals willing to become FBI assets. 
Indeed, computer algorithms can identify not only the first tier of contacts made by the telephone 
number reasonably suspected to be associated with but also the further contacts made 
by the first and second tiers of telephone numbers. NS A Declaration f 9. Going out beyond the 
first tier enhances the ability of analysts to find terrorist connections by increasing the chances 
that they will find previously unknown terrorists. A seed telephone number, for example, may 
be in touch with several telephone numbers previously unknown to analysts. Following the 
contact chain out two additional “hops” to examine the contacts made by the first two tiers of 
telephone numbers may reveal a contact that connects back to a different terrorist-associated 
telephone number already known to the analyst. Going out to the third tier is useful for 
telephony because, unlike e-mail traffic, which includes the heavy use of “spam,” a telephonic 
device does not lend itself to simultaneous contact with large numbers of individuals. 
(TS//ST/NF ) 
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The capabilities offered by such searching of a collected archive of metadata are vastly 
more powerful than chaining that could be performed on data collected pursuant to national 
security letters issued by the Government under 18 U.S.C. § 2709 and targeted at individual 
telephone numbers. If investigators find a new telephone number 

captured, and the Government issues a national security letter for the local and long distance toll 
billing records for that particular account, it would only be able to obtain the first tier of 
telephone numbers that the^^^^Hnumber has been in touch with. To find an additional tier of 



contacts, new national security letters would have to be issued for each telephone number 
identified in the first tier. The time it would take to issue the new national security letters would 
necessarily mean losing valuable data. And the data loss in the most critical cases would only be 
terrorists' Moreover, 

because telephone companies generally only keep call detail records in an easily accessible 
medium for up to two years, historical chaining analysis on the number may lead analysts to 
other individuals by revealing the contacts that were made by a terrorist- 

associated telephone number more than two years ago. See NSA Declaration 12. (1P9MBWW5 
The second major tool analysts can use with an archive of collected metadata 
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keeping up with terrorists 




See NSA 



Declaration f 1 1 . It provides an invaluable capability that could not be reproduced through any 
other mechanism 



E. The Foreign Intelligence Surveillance Act (U) 

FISA provides a mechanism for the Government to obtain business records — here, call 



communications data that is vital for the metadata analysis described above — including the 

telephone number of the calling party, the telephone number of the called party, and the date, 

time and duration of the call. Section 501 of FISA, as recently amended by section 106 of the 

USA PATRIOT Improvement and Reauthorization A.ct of 2005, Pub. L. Ho. 109-177, 120 Stat. 

192, 196-200 (Mar. 9, 2006) (“US A PATRIOT Reauthorization Act”), authorizes the Director of 

the FBI or his designee to apply to this Court 

for an order requiring the production of any tangible things (including books, 
records, papers, documents, and other items) for an investigation to obtain foreign 
intelligence information not concerning a United States person or to protect 
against international terrorism or clandestine intelligence activities, provided that 
such investigation of a United States person is not conducted solely on the basis 
of activities protected by the First Amendment to the Constitution. 



2 The call detail records sought in the attached Application would not be collected by a “pen register” or 
“trap and trace device” as defined by 18 U.S.C. § 3127. Each of these terms refers to a “device or process” which 
either “records or decodes dialing, routing, addressing, or signaling information transmitted by an instrument or 
facility from which a wire or electronic communication is transmitted” — a pen register, id. § 3 127(3), or “captures 
the incoming electronic or other impulses which identify the originating number or other dialing, routing, 
addressing, and signaling information reasonably likely to identify the source of a wire or electronic 
communication” — a trap and trace device, id. § 3 127(4). As the definitions make clear, pen registers and trap and 





(TS//SI//NF) 



detail record 




containing precisely the type of 



50 U.S.C. § 1861(a)(1). 2 (-S) 
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LEGAL ANALYSIS (U) 

L The Application Fully Complies with All Statutory Requirements. (U) 

Section 501(c)(1) of FISA, as amended, directs the Court to enter an ex parte order 
requiring the production of tangible things if the judge finds that the Government’ s application 
meets the requirements of subsections 501(a) and (b). The most significant of those 
requirements are that the tangible things, which include business records, are “for” an 
investigation to protect against international terrorism, 50 U.S.C. § 1861(a)(1). Section 
501(b)(2)(A) indicates that this requirement is one of relevance, providing that the Government’s 
application must include 

a statement of facts showing that there are reasonable grounds to believe that the 
tangible things sought are relevant to an authorized investigation (ot her than a threat 
assessment) conducted in accordance with subsection (a)(2) [i.e., following 
Attorney General-approved Executive Order 12333 guidelines and not conducted of 
a U.S. person solely on the basis of First Amendment-protected activities] to obtain 
foreign intelligence information not concerning a United States person or to protect 
against international terrorism or clandestine intelligence activities, such things 
being presumptively relevant to an authorized investigation if the applicant shows 
in the statement of facts that they pertain to — (i) a foreign power or an agent of a 
foreign power; (ii) the activities of a suspected agent ox a foreign power who is the 
subject of such authorized investigation; or (iii) an individual in contact with, or 
known to, a suspected agent of a foreign power who is the subject of such 
authorized investigation. 

Id. § 1861(b)(2)(A). 3 (U) 



trace devices axe mechanical “device[s]T or perhaps software programs (“processes]’*), that “record 7 ' or “decode” 
data as conmiunications signals are passing through the particular spot in the communications network where the 
“device” or “process” has been installed, or that “capture” data in a similar fashion See, e.g, United States Telecom 
Assd v. FBI, 276 F.3d 620, 623 (D.C, Cir. 2002) (“Pen registers are devices that record the telephone numbers 
dialed by the surveillance's subject; trap and trace defaces record the telephone numbers of the subject's incoming 
calls.”). The mec hanism by which the NSA would receive call detail records does not involve any such “device or 

B ” Instead, would copy and transmit the call detail records, HHHHHH 

independently compile in their normal course of business, to the NSA in real or near-real time. (TS//SI//NF) 

J Until recently, section 501(b)(2) provided only that the Government' s application “specify that the 
records concerned are sought for an authorized investigation conducted in accordance with subsection (a)(2) of this 
section to obtain foreign intelligence information not concerning a United States person or to protect against 
international terrorism or clandestine intelligence activities.” 50 U.S.C. § 1861(b)(2) (Supp. 1 2001). According to 
the legislative history of the USA PATRIOT Reauthorization Act, the pro’sision was amended “to clarify that the 
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Thus, section 501(b)(2) of FISA requires that an application for an order requiring the 
production of business records must include a statement of facts showing that there are 
“reasonable grounds to believe” that certain criteria are met: (1) that the business records are 
relevant to an authorized investigation, other than a threat assessment, that is being conducted, 
for example, to protect against international terrorism; (2) that the investigation is being 
conducted under guidelines approved by the Attorney General under Executive Order 12333; and 
(3) that the investigation is not being conducted of a U.S. person solely upon the basis of 
activities protected by the First Amendment. Id § 1861(b)(2)(A). All of these criteria are met 
here. (U) 

Taking the last two requirements first, the attached Application establishes that the 
business records sought are for FBI investigations intc 



General-approved 12333 guidelines and that are not being conducted of any U.S. persons solely 
upon the basis of First Amendment-protected activities. In addition, the attached Application 
and accompanying declarations by the Directors of the NSA and National Counterterrorism 
Center certainly demonstrate that there are “reasonable grounds to believe” that the business 
records sought are “relevant” to authorized investigations to protect against international 
terrorism. (S) 

A. The Business Records Sought Meet the Relevance Standard. (U) 

Information is “relevant” to an authorized international terrorism investigation if it bears 

upon, or is pertinent to, that investigation. See 13 Oxford English Dictionary 561 (2d ed. 1989) 

(“relevant” means “[b]earing upon, connected with, pertinent to, the matter in hand”); Webster’s 

tangible things sought by [an order under section 501] must be ‘relevant’ to an authorized preliminary or full 
investigation ... to protect against international terrorism.” H.R. Conf. Rep. No. 109-333, at 90 (2005). (U) 





investigations which are being conducted under Attorney 
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Third New Int’l Dictionary 1917 (1993) (“relevant” means “bearing upon or properly applying to 
the matter at hand . . . pertinent”); see also Oppenheimer Fund, Inc. v. Sanders, All U.S. 340, 

351 (1978) (noting that the phrase “relevant to the subject matter involved in the pending action” 
in Fed. R. Civ. Proc. 26(b)(1) has been “construed broadly to encompass any matter that bears 
on, or that reasonably could lead to other matter that could bear on, any issue that is or may be in 
the case”); cf Fed. R. Evid. 401 (‘“Relevant evidence’ means evidence having any tendency to 
make the existence of any fact that is of consequence to the determination of the action more 
probable or less probable than it would be without the evidence.”) (emphasis added). Indeed, 
section 501(b)(2) establishes a presumption that the Government has satisfied the relevancy 
requirement if it show's that the business records sought “pertain to — (i) a foreign power or an 
agent of a foreign power; (ii) the activities of a suspected agent of a foreign power who is the 
subject of such authorized investigation; or (iii) an individual in contact with, or knowm to, a 
suspected agent of a foreign power who is the subject of such authorized investigation.” 50 
U.'S.C. § 1 86 1(b)(2)(A). The USA PATRIOT Reauthorization Act added this presumption to 
section 501(b) to outline certain situations in which the Government automatically can establish 
relevance; the presumption was not intended to change the relevance standard for obtaining 
business records under section 501. See Pub. L. No. 109-177, § 106, 120 Stat. 196; H.R. Conf. 
Rep. No. 109-333, at 91 (Section 501(b)(2) “also requires a statement offsets to be included in 
the application that shows there are reasonable grounds to believe the tangible things sought are 
relevant, and, if such facts show reasonable grounds to believe that certain specified connections 
to a foreign power or an agent of a foreign power are present, the tangible things sought are 
presumptively relevant. Congress does not intend to prevent the FBI from obtaining tangible 
things that it currently can obtain under section [501] C) (emphasis added). (U) 
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The FBI currently has over 1,000 open National Security Investigations targetingH^MJ 
Osama 

As we have explained above, the bulk telephony metadata sought in the attached Application is 
relevant to the FBI’s investigations into^^^^Joecause, when acquired, stored, and processed, 
the telephony metadata would provide vital assistance to investigators in tracking down FfM^ 
operatives. Although admittedly a substantial portion of the telephony metadata that is collected 
would not relate to operatives of the intelligence tool that the 

Government hopes to use to fin communications — metadata analysis — requires 
collecting and storing large volumes of the metadata to enable later analysis. All of the metadata 
collected is thus relevant, because the success of this investigative tool depends on bulk 
collection. (TS//SI//N F) 

Archiving and analyzing the metadata sought in the attached Application will assist the 
FBI in obtaining foreign intelligence and, in particular, in identifying the telephone numbers o; 

(operating within the United States. For example, contact chaining 
^^Jof the archived information will allow- the NS A to identify telephone numbers that have 
been in contact with telephone numbers the NSA reasonably suspects to be linked t< 
and its affiliates. NSA may provide such information to the FBI, which can determine whether 
an investigation should be commenced to identify the users of the telephone numbers and to 
determine whether there are any links to international terrorist activities. The NSA estimates that 
roughly 800 telephone numbers will be tipped annually to the FBI, CIA, or other appropriate 
U.S. government or foreign government agencies. NSA Declaration % 18. The FBI would also 





4 The NSA exp^cj 
of metadata pertaining to 




cords request, over the course of a year, will result in the collection 
communications. See NSA Declaration 'll 6. (TS//SLTOF) 
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Ion terrorist-associated 



be able to ask the NSA to perform contact chaining| 
telephone numbers known to the FBI. (TS//SI//NF ) 

The call detail records sought in the attached Application are certainly “relevant” to an 

11^^ As this Court recently noted in^^^^^^^^he requirement of relevance is a 
relatively low standard. at 29. In that case, the Court was interpreting a similar, 

and quite possibly more stringent standard than that presented here. There, the Court found that 
section 402(a) of FIS A was satisfied, i.e., that “the information likely to be obtained is . . . 
relevant to an ongoing investigation to protect against international terrorism.” 50 U.S.C. 

§ 1842(c) (emphasis added). 5 Here, by contrast, the Application need only establish that there 
are “reasonable grounds to believe” that the records sought are relevant to an authorized 
international terrorism investigation. 6 Id § 1861(b)(2)(A). (TS//SI//NF) 

In evaluating whether metadata collected in bulk is “relevant” to investigations into^^f 
pis Court has recognized that, “for reasons of both constitutional 
authority and practical competence, deference should be given to the fully considered judgment 
of the executive branch in assessing and responding to national security threats and in 




5 Although the Government argued that the statute did not permit the Court to look behind the 

Government’s certificaho^^elevance the Court assumed for purposes of the case that it should consider the basis 
for the certification. See 26-28. (TS//SI//NF ) 

6 The “reasonable grounds to believe” standard is simply a different way of articulating the probable cause 
standard. See Maryland v. Pringle, 540 U.S. at 371 (quoting Brinegar v. United States , 338 U.S. 160, 175 (194?) 
(‘“The substance of all the definitions of probable cause is a reasonable ground for belief of guilt As the 
Supreme Court has recently explained, “[tjhe probable-cause standard is incapable of precise definition or 
quantification into percentages because it deals with probabilities and depends on the totality of the circumstances” 
Maryland v. Pringle, 540 U.S. 366,371 (2003). Rather than being “technical,” these probabilities “are the factual 
and practical considerations of everyday life on which reasonable and prudent men, not legal technicians, act.” 
Brinegar, 338 U.S. at 176; see also Pringle , 540 U.S. at 370 (quoting Illinois v. Gates, 462 U.S. 213, 231 (1983) 
(quoting Brinegar)). In addition, probable cause “does not require the fine resolution of conflicting evidence that a 
reasonable-doubt or even a preponderance standard demands." Gerstein v. Pugh, 420 U.S. 103, 121 (1975); see also 
Illinois v. Gates, 462 U.S. 213, 235 (1983) (“Finely tuned standards such as proof beyond a reasonable doubt or by a 
preponderance of the evidence, useful in formal trials, have no place in the (probable cause] decision,”). (U) 
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determining the potential significance of intelligence-related information. Such deference is 
particularly appropriate in this context, where the Court is not charged with making independent 
probable findings.” 30-31. Court noted that the 

proposed activity would result in the collection of metadata pertaining electronic 

communications, all but a very small fraction of which could be expected to be unrelated tcfl|H 
[fy at 39-40, 48. Nonetheless, this Court found that the bulk collection 
of metadata “is necessary to identify the much smaller number 

communications” and that therefore, “the scope of the proposed collection is consistent with the 
certification of relevance.” Id at 48-49. In part that was because the NS A had explained, as it 
does here, that ‘‘more precisely targeted forms of collection against known accounts would tend 
to screen out the ‘unknowns’ that NS A wants discover, so that NSA needs bulk collection in 
to identify as 

collection of e-mail metadata was relevant to FBI investigations into 
so is the bulk collection of telephony metadata described herein. (TS//SLVNF ) 

B. The Proposed Collection Is Appropriately Tailored. (U) 

Title V of FIS A does not expressly impose any requirement to tailor a request for 
tangible things precisely to obtain solely records that are strictly relevant to the investigation. To 
the extent, however, the Court construes the “relevance” standard under Title V to require some 
tailoring of the requested materials to limit overbreadth, the request for tangible things proposed 
here is not overbroad. As this Court concluded applicable relevance 

standard does not require a statistical ‘tight fit’ between the volume of proposed collection and 
the much smaller proportion of information that will he directly relevant tc^^^^H-related FBI 
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investigations.” 7 Id. at 49-50. Instead, it is appropriate to use as a guideline the Supreme 
Court’s “special needs” jurisprudence, which balances any intrusion into privacy against the 
government interest at stake to determine whether a warrant or individualized suspicion is 
required. See Board of Educ. v. Earls , 536 U.S. 822, 829 (2002); see generally 
at 50-52 8 Here, the Government’s interest is overwhelming. It involves thwarting terrorist 
attacks that could take thousands of lives. “This concern clearly involves national security 
interests beyond the normal need for law enforcement and is at least as compelling as other 
governmental interests that have been held to justify searches in the absence of individualized 
suspicion.” 51-52; see also Haig v. Agee, 453 U.S. 280, 307 (1981) (“It is 

obvious and unarguable that no governmental interest is more compelling than the security of the 
Nation”) (internal quotation marks omitted). The privacy interest, on the other hand, is minimal. 
As we explain below 7 , see infra § XL, the type of data at issue is not constitutionally protected; and 
it would never even be seen by any human being unless a terrorist connection were first 
established. Indeed, only a tiny fraction (estimated to be 0.000025% or one in four million) of 
the call detail records included in the archive actually would be seen by a trained analyst . 9 
(TS//BI//N F)- 




7 As noted above, the relevance standard being interpreted in the pen register context in 
that found in section 402 of FISA — is quite possibly more stringent than that required to be met 
for business records under section 50 1 of FIS A. (S) 

z Because, as we explain below, there is no Fourth Amendment-protected interest in the telephony 
metadata at issue here, the actual standards applied under Fourth Amendment balancing are far more rigorous than 
any that the Court should read into the statutory requirement that the business records sought under section 50 1 be 
“relevant” to an international terrorism investigation. Nevertheless, the balancing methodology applied under the 
Fourth Amendment — balancing the Government’s interest against the privacy interest at stake — can provide a useful 
guide for analysis here. (S) 

s The NSA would conduc^ontec^hainm^iree “hops” out, i.e., to include the first three tiers of contacts 

made by tire reasonably suspectet^^^^m^^^^Kelephone number. Even though a substantial portion of the 

telephone numbers in those first tnre^oe^o^mntari^nay not be used by terrorist operatives, they are all 
“connected” to the seed telephone number. (TS//SI/7NF) 
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And. as this Court recently found;, “the Government need not make a showing that it is 

using the least intrusive means available. Rather, the question is whether the Government has 

chosen ‘a reasonably effective means of addressing’ the need.” at 52-53 (quoting 

Earls, 536 U.S. at 837) (internal citations omitted); see also Earls , 536 U.S. at 837 (“[TJhis 

Court has repeatedly stated that reasonableness under the Fourth Amendment does not require 

employing the least intrusive means, because the logic of such elaborate less-restrictive- 

altemative arguments could raise insuperable barriers to the exercise of virtually all search-and- 

seizure powers.”) (internal quotation marks omitted); Vernonia Sch. Dist 47 J v. Acton , 515 U.S. 

646, 663 (1995) (“We have repeatedly refused to declare that only the ‘least intrusive’ search 

practicable can be reasonable under the Fourth Amendment.”). Here, as 

“senior responsible officials, whose judgment on these matters is entitled to deference . . , have 

articulated why they believe that bulk collection and archiving of meta data are necessary to 

identify and monitor^^^^^^^^^^^^^^^^vhose . . . communications would otherwise go 

undetected.” 53-54. Such bulk collection is thus a “reasonably effective 

means to this end.” Id. at 54. (TS//S1//E1F) 

In sum, as this Court previously concluded in the pen register context, 

the bulk collection proposed in this case is analogous to suspicionless searches or 
seizures that have been upheld under the Fourth Amendment in that the 
Government’s need is compelling and immediate, the intrusion on individual 
privacy interests is limited, and bulk collecti on appears to be a reasonably 
effective means of detecting and monitoring 

thereby obtaining information likely to be relevant to ongoing FBI investigations. 

In these circumstances, the certification of relevance is consistent with the fact 
that only a very small proportion of the huge volume of information collected will 
be directly relevant to the FBI’ s^^^^^^^^^p.nvestigations. 

Id. (TS//SI//NF )- 
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C, The Government Will Apply Strict Minimization Procedures to the Use of 
the Collected Data. (S') 

The Government can assure the Court that, although the data collected under the attached 
Application will necessarily be broad in order to achieve the critical intelligence objectives of 
metadata analysis, the use of that information will be strictly tailored to identifying terrorist 
communications and will occur solely according to strict procedures and safeguards, including 
particular minimization procedures designed to protect U.S. person information. These 
procedures and safeguards are almost identical to the requirements imposed by this Court in^H 
riiich authorized collection of a similar volume of metadata. (TS//SI//NF) 

First, as described in the attached Declaration from the Director of the NSA, the NSA 
will query the archived data solely when it has identified a known telephone number for which, 
“based on the factual and practical considerations of everyday life on which reasonable and 
prudent persons act, there are facts giving rise to a reasonable, articulable suspicion that the 



telephone number is associated with 




provided. 



however, that a telephone number believed to be used by a U.S. person shall not be regarded as 



associated with I 



solely on the basis of activities 



that are protected by the First Amendment to the Constitution.” NSA Declaration f 1 1 



10 



Similarly, 



Iwould be undertaken only with respect to such an identified “seed” 



telephone number. For example, when anl 



I operative is apprehended, his cellular 



telephone may contain a phone book listing telephone numbers. Telephone numbers listed in 
such a phone book would satisfy the “reasonable articulable suspicion” standard. This same 



30 For example, a telephone number of a U.S. person c ould not be a seed number “if the only information 
thought to support the belief that the [number] is associated that, in sermons or in postings on a web 

site, the U.S. person espoused jihadist rhetoric that fell short of ‘advocacy . . . directed to inciting or producing 
imminent lawless acti on and . . . likely to incite or produce such action.’ Brandenberg v. Ohio, 395 U.S. 444, 447 
(1969) (per curiam.) . ” at 58. (TS/ZSIW ?) 
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standard is, in effect, the standard applied in the criminal law context for a “Terry stop. See 
Terry v. Ohio. 392 U.S. 1, 21, 30 (1968); see also Illinois v. Wardlow , 528 U.S. 119, 123 (2000) 
(police officer may conduct a brief, investigatory Terry stop “when the officer has a reasonable, 
articulable suspicion that criminal activity is afoot”)- 11 It bears emphasis that, given the types of 
analysis the NS A will perform, no information about a telephone number will ever be accessed 
by or presented in an intelligible form to any person unless either (i) that telephone number has 
been in direct contact with a reasonably suspected terrorist-associated telephone number or is 
linked to such a number through one or two intermediaries, or (ii) a computer search has 
indicated that the telephone number has 

(TS//SI//N F ) 

In addition, any query of the archived data would require approval from one of seven 
people: the Signals Intelligence Directorate Program Manager for Counterterrorism Special 
Projects; the Chief or Deputy Chief, Counterterrorism Advanced Analysis Division; or one of 
four specially authorized Counterterrorism Advanced Analysis Shift Coordinators in the 
Analysis and Production Directorate of the Signals Intelligence Directorate. NSA Declaration 
f 19. NSA’s Office of General Counsel (OGC) would review and approve proposed queries of 
archived metadata based on seed accounts reasonably believed to be used by U.S. persons. Id. 
f 16. Finally, NSA’s OGC will brief analysts concerning the authorization requested in the 
Application and the limited circumstances in which queries to the archive are permitted, as well 



1 ! The “reasonable articulable suspicion” standard that the Government will impose on itself with respect 
to data collected through this Application is higher than that required by statute or the Constitution. Under FISA 
tire only standard to be satisfied prior to collecting infoimation -via a request for business records is that tire 
information be relevant to an international terrorism investigation. The Fourth Amendment requires a “reasonable 
articulable suspicion” to justify a minimally intrusive Terry stop. Here, no Fourth Amendment interests are even 
implicated. (U) 
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as other procedures and restrictions regarding the retrieval, storage and dissemination of the 
archived data. Id (TS//SI//N E) 

Second, NSA will apply several mechanisms to ensure appropriate oversight over the use 
of the metadata. The NSA will apply the existing (Attorney General approved) guidelines in 
United States Signals Intelligence Directive 18 (1993) (“USSID 18”) (Exhibit D to the 
Application) to minimize the information reported concerning U.S. persons. NSA Declaration 
f 17. Prior to disseminating any U.S. person information, the Chief of Information Sharing 
Services in the Signals Intelligence Directorate must determine that the information is related to 
counterterrorism information and is in fact necessary to understand the foreign intelligence 
information or to assess its importance, Id.; see USSID 18, § 7.2 (NSA reports may include the 
identity of a U.S. person only if the recipient of the report has a need to know that information as 
part of his official duties and, inter alia , the identity of the U.S. person is necessary to understand 
the foreign intelligence information or to assess its importance). The Director of the NSA will 
direct the NSA Inspector General and General Counsel to submit an initial report to him 45 days 
after the receipt of records pursuant to the Order assessing the adequacy of the management 
controls for the processing and dissemination of U.S. person information. NSA Declaration 
f 22. The Director of the NSA will provide the findings of that report to the Attorney General. 

Id. (TS//SIANF) 

In addition, every time one of the limited number of NSA analysts permitted to search the 
archived data carries out such a search, a record will be made, and the analyst's login and IP 
address, and the date, time and details of the search will be automatically logged to ensure an 
auditing capability. NSA Declaration 1 16. The NSA’s OGC will monitor both the designation 
of individuals with access to the archived data and the functioning of this automatic logging 
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capability. Id. The NSA Inspector General, the NSA General Counsel, and the Signals 
Intelligence Directorate Oversight Compliance Office will periodically review this program. Id. 
<1 22. At least every ninety days, the Department of Justice will review- a sample of NSA’ s 
justifications for querying the archived data. Id. f 19, The Director of the NSA himself will, in 
coordination with the Attorney General, inform the Congressional Intelligence Oversight 
Committees of the Court’s decision to issue the Order. Id *jj 23. (TS//S37/NF) 

Third, the collected metadata will not be kept online (that is, accessible for queries by 
cleared analysts) indefinitely. The NSA has determined that for operational reasons it is 
important to retain the metadata online for five years, at which time it will be destroyed. Id. 

% 20. The U.S. Government has a strong operational interest in retaining data online for five 
years to determine^^^^^^^^^^^^xintacts associated with newly-discovered “seed” 
telephone numbers. Id. In addition, moving data off-line requires significant resources, raises 
the possibility of corruption and loss of data, and would incur probable delays in moving data 
back online for it to be accessed when needed. See generally 



Finally, when and if the Government seeks an extension of any order from the Court 
requiring the production of business records containing telephony metadata, it will provide a 
report about the queries that have been made and the application of the reasonable articulable 
suspicion standard for determining that queried telephone numbers were terrorist related. NSA 





Tder (Feb. 28, 2006). (TS//SI//NF) 



Declaration % 24. (TS//SI//NF) 
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EL The Application Fully Complies with the First and Fourth Amendments to the 

Constitution. (If) 

There is, of course, no constitutionally protected privacy interest in the information 
contained in call detail records, or telephony metadata. In Smith v. Maryland, 442 U.S. 735 
(1979), the Supreme Court squarely rejected the view that an individual can have a Fourth 
Amendment protected “legitimate expectation of privacy regarding the numbers he dialed on his 
phone.” Smith , 442 U.S. at 742 (internal quotation marks omitted). The Court concluded that 
telephone subscribers know that they must convey the numbers they wish to call to the telephone 
company for the company to complete their calls. Thus, they cannot claim “any general 
expectation that the numbers they dial will remain secret.” Id. at 743; see also id. at 744 
(telephone users who “voluntarily convey[]” information to the phone company “in the ordinary 
course” of making a call “assum[e] the risk” that this information will be passed on to the 
government or others) (internal quotation marks omitted). Even if a subscriber could somehow 
claim a subjective intention to keep the numbers he dialed secret, the Court found that this was 
not an expectation that society would recognize as reasonable. To the contrary, the situation fell 
squarely into the line of cases in which the Court had ruled that “a person has no legitimate 
expectation of privacy in information he voluntarily turns over to third parties.” Id. at 743-44. 12 
Although the telephony metadata that would be obtained here would include not only telephone 
numbers dialed, but also the length and time of the calls and other routing information, there is 
no reasonable expectation that such information, which is routinely collected by the telephone 
companies for billing and fraud detection purposes, is private. The information contained in the 

12 See also United States v. Millet - , 425 U.S. 435, 443 (1976) (“This Court has held repeatedly that the 
Fourth Amendment does not prohibit the obtaining of information revealed to a third party and conveyed by Mm to 
Government authorities, even if the information is revealed on the assumption that it will be used only for a limited 
purpose and the confidence placed in the third party will not be betrayed.”). (U) 
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call detail records no way resembles the substantive 

contents of telephone communications that are protected by the Fourth Amendment. See Katz v. 
United States, 389 U.S. 347 (1967). (S) 

Moreover, as this Court has previously found, because of the absence of a reasonable 
expectation of privacy in metadata, the large number of individuals whose telephony metadata 
will be obtained “is irrelevant to the issue of whether a Fourth Amendment search or seizure will 
occur.” 63. Nor would the derivative use of the archived metadata through 

contact chaining prohibited by the Fourth Amendment. See id. at 63-66; 

United States v. Calandra, 414 U.S. 338, 354 (1974) (Grand jury “[qjuestions based on illegally 
obtained evidence are only a derivative use of the product of a past unlawful search and seizure. 
They work no new Fourth Amendment wrong.”). (TS//SI//NF ) 

The proposed business records request is also consistent with the First Amendment. 

Good faith law enforcement investigation and data-gathermg activities using legitimate 
investigative techniques do not violate the First Amendment, at least where they do not violate 
the Fourth Amendment, See Reporters Comm, for Freedom of the Press v. AT&T, 593 F.2d 
1030, 1064 (D.C. Cir. 1978); see at 66 (“The weight of authority supports 

the conclusion that Government information-gathering that does not constitute a Fourth 
Amendment search or seizure will also comply with the First Amendment when conducted as 
part of a good-faith criminal investigation.”); cf. Laird v. Tatum, 408 U.S. 1, 10, 13 (1972) (the 
“subjective 'chill” 5 stemming from “the mere existence, without more, of a governmental 
investigative and data-gathering activity that is alleged to be broader in scope than is reasonably 
necessary for the accomplishment of a valid governmental purpose” does not constitute a 
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cognizable injury). As this Court recognized in the context of the Government’s application to 
collect e-mail metadata in bulk, 

the proposed collection of meta data is not for ordinary law enforcement 
purposesAmGr^urtheraice of the compelling national interest of identifying and 
tracking ^^^^^^^^Joperatives and ultimatel^A?' thwarting terrorist attacks. 

The overarching investigative effort against not aimed at curtailing 

First ..Amendment activities and satisfies the “good faith” requirement .... 

Mat 68. ( TS//SI//NP) 

Nonetheless, we are mindful of this Court’s admonition that, because “the extremely 
broad nature of this collection carries with it a heightened risk that collected information could 
be subject to various forms of misuse, potentially involving abridgment of First Amendment 
rights of innocent persons . . . special restrictions on the accessing, retention, and dissemination 
of such information are necessary to guard against such misuse.” Id. The strict restrictions 
proposed here on access to, and processing and dissemination of, the data are almost identical to 
those imposed by this Court 

82-87. 13 In addition, the Department of Justice would review a sample of NSA’s 
justifications for querying the archived data at least every' ninety days. ( TS//SLWF )- 




\Compare NSA Declaration fjj 13-24 with] 



One minor difference is that for operational reasons the NSA seeks to retain the tele phony metadata 
collected online for live, rather than four and a half, years. Compare NSA Declaration f 20 



online of the bulk e-mail metadata for four and a half years) . (TS//S 




(approving retention 
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CONCLUSION (U) 

For the foregoing reasons, the Court should grant the requested Order. (U) 
Respectfully submitted, 



Dated: May 23, 2006 




Deputy Assistant Attorney General, 
Office of Legal Counsel 




Senior Counsel , 

Office of Legal Counsel 




Office of Legal Counsel 



r ounsel for Intelligence Policy 



U.S. Department of Justice 
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Washington, D.C. 20530 
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All redactions taken in accordance with 
one or more of the following FOIA 
exemptions and statutes: 

(b)(1) 

(b) (3) - P.L. 86-36 
(b) (3) - 50 USC 3024(i) 

(b) (3)- 18 USC 798 




3 43 ., 








(U) This USSID prescribes polities artef'praeerfffres andassigns responsibilities to erisuWiftatthe 
missions and functions of the Unitest^ttrtes'-SISiij^SjstflJ^ (USSS) are conducted in, a manner that 
safeguards the constitutional rights a^^pwsons. 



(U) This USSID. has been comp{eteiy.rewritten'‘.to'.mak® it shorter and -easier to understand. It 
constitutes a summary;, of the Jaws sr^-' regulations directly affecting USSS operations. All USSS 
personnel who collect,- -process, retain, ortiisseminate information to, from:,’ or about U.S. persons or 
persons in the United States must.be famHfi.F-with its.eontents. 



( FOUQ> This USSiD" Supersedes USSiCHS and; USSID 18, Annex-. A (distributed 'separately to 
selected recipients), both of which are dated-.'20 October 1980, and must now be destroyed. Notify 
D1RNSA/CHCSS (USSID^iWiahager) if this eosticwf of USSl-D: IS' is destroyed . because of a rr emergency 
actionj-otherwise, requestapprayaf from^DflNS^CHCSS before destroying thlsUSSlD. ■' 



(FQUO) Release or. expose of this document to contractors and consultants without approval 
from th® USSID Msnageris jj-ohi&tst^ instructions. applicable taxeieas® or exposure of USSID to 
contractor$ i: and coreui'tiats may be found IrrUSSlD- 1&J ■- ' ' .y 

(FQUQ) Questions and-cbmrasnts concerning this USSID should, be addressed to the Office of 
th® General CounsaijilS^SS’^^sntis^ NSTS 963-3121 or | 




j. fvs. McConnell 

Vice Admiral, U.S. Navy 
Director 



(FQUOV This hard copy change provides replacement pages for your copy of USS1D 1 8, dated 
27 July 1993. 

Actions: 1. Change references to “PCS” to read “P02” in paragraphs 5.4.d.(3), 7.1. (last line), 
7.2.c.(S) (lines 3 and 5), 7.3.c.(1) (lines 2 and 3), 7.5 ., 8.3. b., and 3.4, b. in the basic USSID 18. 

2. From your copy of USSID 18 remove and destroy pages A— 1/1 through A-1/8. 

3. Insert new pages A— 1/1 through A-1/9 (replacement of pages in above action). These 
pages update the USSiD to reflect current changes in standard minimization procedures' for NSA elec- 
tronic surveillances. 

4. In the last paragraph of the Letter of Promulgation change to read: “Questions and 
comments concerni ng this USSID should be a ddressed to the Office of General Counsel, NSA/CSS, 
N STS 933-3121 or 

5. On tie Table of Contents (page iv), change the title of Appendix 1 to Annex A to read 
“Standardized Minimization Procedures For MSA Electronic Surveillances”. 

FOR THE EXECUTIVE AGENT: 




USSID Manager 
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LEQ.AL COMPLIANCE AND ' - . 
MINIMIZATION PROCEDURES (0) 

SECTION 1 - PREFACE 



The Fourth: Amendment to the United States: Constitution protects all U.S.-, persons 
anywhere in the world, and ail persons within the United States: frbm unreasonable searches' and 
seizures by any person or agency acting on behalf of the U.S; Government; Th®. Supreme Court has 
ruled that the interception of electronic communications is a search arid seizure within the meaning 
of the Fourth Amendment It is therefore mandatory that signals intelligence (S)GINT) operations be 
conducted pursuant to procedures" which meet the reasonableness requirements of the Fourth . 
Amendment 

. 1.2. (U) In determining . whether; United States - SIG I NT System - (USSS) operations are 
"reasonable/'- it is: necessary, td-- balance. the U.S. Government's need; for, foreign intelligence 
information and the privacy interests of persons protected by the Fourth Amendment" Striking, that 
balance has consumed much time and effort by all branches of the United States Government The 
results of that: effort' are reflected- in. the references listed 1 in Seaipm . 2, below.-, Together, these 
references require the minimization of U.S. person information collected; processed, retained or 
disseminated by the USSS. The purpose of this document is to implement these minimization 
requirements. : f . r . - ■■ - ■ 

1.3. (U) Several themes run throughout this USSID. The. most important is that intelligence 
operations and the protection of constitutional rights are not incompatible. It is not necessary to 
deny i%iti mate/ foreign intelligence/ collection or suppress legitimate;: foreign intelligence 
information to protect the Fourth Amendment rights of U.S. persons. 

1.4. (U) Finally, these minimization procedures implement the- constitutional- principle- of 

"reasonableness" by giving different categories of individuals and entities different levels of 
protection, These levels range from the stringent protection accorded U,S, citizens and permanent 
resident aliens in the United States to provisions relating to foreign diplomats; in the U.S. These 
differences reflect yet another main theme of these procedures, that is, that the focus of ail foreign 
intelligence operations is on foreign entities and persons. . . . : :r /;■ 



SECTION 2 -REFERENCES 



2.1. (U) References . ■ 

a. SO U.S.C. 1 §01, et seq.. Foreign Intelligence Surveillance Act (FISA) of 1971, Public Law 

No. 95*511. • • • , .«••' ' 

b. Executive Order 1 2333, "United States Intelligence Activities," dated 4 December 1981 . 
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c. DoD Directive 5240.1, "Activities of DoD intelligence Components that Affect U.s' 
Persons," dated 25 April 1388. 



d. NSA/CSS Directive. Nol 1 0-30/ "Procedures Governing Activities of NSA/CSS that Affect 
U.S. Persons," dated 20 September 1336. 



“\ 




3.1. (U) The policy of the USSS is to TARGET or COLLECT only FOREIGN COMMUNICATIONS.® 
The USSS will not intentionally COLLECT communications to, from or about U.S. PERSONS or persons 
or entities in the U.S. except as set forth in this USSID. If the USSS inadvertently COLLECTS such 
communications, it will process, retain and disseminate them only in accordance with this USSID. • 



icnoN 4 = collection 



4. 1 . (S-CCQ) Communications which are known to be to, from or about a U.S. PERSON 

will not be intentionally intercepted, or selected through 
the use of a SELECTION TERM, except in the following instances: 

a. With the approval of die United States Foreign intelligence Surveillance Court under 
the conditions outlined in Annex A of this USSID. 

b. With the approval of the Attorney General of the U nited States, if: 

(1) The COLLECTION istiirected against the following: 



(a) Communications to or from U.S. PERSONS outside the UNITED STATES, or 




(c) Communications which are not to or from but merely about U.S. PERSONS 
(wherever located). • 



(2) The person is an AGENT OF A FOREIGN POWER, and 

(3) The purpose of the COLLECTION is to acquire significant FOREIGN INTELLIGENCE 

information. 

c. With the approval of the Director, National Security Agency/Chief, Central Security 
Service (DiRNSA/CHCSS), so long as the COLLECTION need not be approved by the Foreign 
1 nt el i i gence Survti ! I ancs Court or the Attorney General, and 

(1) The person has CONSENTED to the COLLECTION by executing one of the CONSENT 
forms contained in Annik H, or 

* Capita Sized words in Sections 3 through 9 are defined terms in Section 9. 
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(2) The person is reasonably believed to be held captive by a FOREIGN POWER or group 

engaged in INTERNATIONAL TERRORISM, or ' ■ 

(3) The TARGETED 

and the D1RNSA/CHCSS Has approved the COLLECTION in accordance with Annex l, 



or 



between a' U.S. 



(4) The COLLECTION is directed against 
PERSON in the UNITED STATES and a foreign entity outside the UNITED STATES, the TARGET is the 
foreign entity, and the DIRNSA/CHCSS has approved the COLLECTION inaceofddnce with Annex K, or 



(5) Technical devices (e.g., 



are employed 



to limit acquisition by the USSS to comm unicati ons to or from the TARGET, or to specific forms of , 
communications used by the TARGET (e.g.. 



and the COLLECTION is directed against) voice and facsimile 

communications with one COMMUNICANT in the UNITED STATES, and . the TARGET of the 
COLLECTION is 



(a) A non-U.S. PERSON located outside the UNITED STATES, 




(S) Copies of approvals granted by the DIRNSA/CHCSS Under these provisions will be 
retained in the Office of General Counsel for review by the Attorney General. 

d. Emergency Situations. ' - 



(1) In emergency situations, DIRNSA/CHCSS may authorise the COLLECTION of 
information to, from, or about a U.S. PERSON who is outside the UNITED STATES when securing the 
prior approval of the Attorney General is not practical because: 

(a) The time required to obtain such approval would result in the loss of significant 
FOREIGN INTELLIGENCE and would cause substantial harm to the national security. 

(b) A person's life or physical safety is reasonably believed to be in immediate 

danger. ' ''' "■* " ’ ' ,v ' '* ’ ; " 

■ (c) The 1 physical security of a defense installation ' or government property is 
reasonably believed to 6e in immediate danger. 

(2) In those cases where the DIRNSA/CHCSS authorizes emergency COLLECTION, except 

for actions taken under paragra ph ■ d . ( i )(b) a hove, DtRNSA/CHGSshaltfihd.that there is probable 
cause that the TARGET meets one of the following criteria: - : ' 

(a) A person who, for or on behalf of a FOREIGN POWER, is engaged in clandestine 
intelligence activities (including covert activities intended to affect the political or governmental 
process), sabotage^ or INTERNATIONAL TERRORIST activities, or activities in preparation for 
INTERNATIONAL TERRORIST activities; or who conspires with, or knowingly aids and abets a person 
engaging in such activities. 
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(b) A person who is an officer of employee of a FOREIGN POWER. 

(c) , A person unlawfully acting for, or pursuant to the direction of, a FOREIGN 
POWER. The mere fact that a person's activities may benefit or further the aims of a FOREIGN POWER 
is net enough to bring that person under this subsection, absent evidence that the person is taking 
direction from, or acting in knowi ng concert with, the FOREIGN POWER; 

(d) A CORPORATION or other entity that is owned or controlled directly or 
indirectly by a FOREIGN POWER, ' 

(«) A person in contact with, dr acting in collaboration, with, an intelligence or 
security service of a foreign power for the purpose of providing access to information or material 
classified by the United States to which such person has access. 

■i (3) In ail cases where emergency collection is authorized, the following steps shall be 

taken: 

(a) The General Counsel will be notified immediately that the COLLECTION has 

started* 



(b) The General Counsel will initiate immediate efforts to obtain Attorney General 
approval to continue the collection. If Attorney General approval is not obtained within seventy two 
hours, the COLLECTION will be terminated. If the Attorney General approves the COLLECTION, it may 
continue for the period specified in the approval. 

a. Annual reports to the Attorney General are required for COLLECTION conducted under 
paragraphs 4. 1.e.(3) and (4). Responsible analytic offices will provide such reports through the Deputy 
Director for Operations (DDO) and the General Counsel to the DIRNSA/CHCSS for transmittal to the 
Attorney General by 3 1 January of each year. 




4.3. (U) Incidental Acquisition of U.S. PERSON information. Information to, from or about 
U.S. PERSONS acquired incidentally as a resuit of COLLECTION directed against appropriate FOREIGN 
INTELLIGENCE TARGETS may be retained and processed in accordance with Section S and Section 6 of 
thisUSSID. . 
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4.4. (SrCCO) Nonresident Alien TARGETS Entering the UNITED STATES. 

a.' If the com rrf unicati ©ns of a nonresident alien located abroad are being TARGETED and 
the USSS learns that the li^^du^iw'erfteredl the, UNITED. STAINS', COLLECTION may continue for a 
period of 72 hours provided that the DIRNSA/CHCSS is advised immediately and: ' 

(1) Immediate efforts are initiated to obtain Attorney General approval, or 

(2) A determination is made within the 72 hour period that the 



b. If Attorney Genera! approval is obtained, the COLLECTION may continue for the length 
of time specified in the approval. 



c. If it is determined that 
continue at the discretion of the operational element 



COLLECTION may 



within 72 hours, COLLECTION must be. terminated 
General approval is obtained, dr the individual leaves the UNITED STATES. 

4.5. (C - CCOh U.S. PERSON TARGETS Entering the U N ITED STATES. 



or if Attorney General approval is not obtained 

Attorney 



a. if communications to, fromor about a U.SI PERSON located outside the UNITED STATES 
are being COLLECTED* under Attorney General approval d^cribed’ In,, Section 4.1. b. above, the 
COLLECTION must stop when the USSS learns that the individual His entered the UNITED STATES. 



b. While the individual is in the, UNITED STATES, COLLECTION may be resumed only with 
the approval of the United States Foreign intelligence Surveillance Court as described in Annex A. 



4.6. - foCCO) - Requests to TARGET U.3. PERSONS. 
PERSONS, 



proposals for COLLECTION against U.S. 

must be submitted 



through the DDO and the General Counsel to the DIRNSA/CHCSS for review. 



4.7. 4 C CCO) - Direction Finding.' Usd of direction finding solely’ to determine the.location of a 
transmitter located puteide~bftHeO NITED STATES does hot constitute. ELECTRONIC SCI RVEi LLANCE or 
COLLECTION even if directed at transmitters believed to be used by U.S.‘ PERSONS. Unless COLLECTION 
of the communications.. |s. a otherwise, authorized under.. these,. pr<xedures,,..the ; contents of 
communications to which a UVs' PEfeljN is a party monitored in the* courtf of direction finding may 
only be used to identify the transmitter.’ 



4.3. (U) Distress Signals. Distress signals may be intentionally collected, processed, retained, 
and disseminated without regard to the restrictions contained in this USSID. 
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4.9* (U) COMSEC Monitoring and Security Testing ©f Automated Information Systems. 
Monitoring for communications security purposes must be conducted with the consent of the person 
being monitored end in accordance with the procedures established in National Telecommunications 
and information Systems Security Directive 600, Communications Security (COMSEC) Monitoring, 
dated 1 0 April 1 990. Monitoring for communications security purposes is'ngt governed by this USSID. 
intrusive security testing to assess security vulnerabilities in automated information systems likewise is 
not governed by this USSID. 



5.1. (5<CQ) Use of Selection Terms During Processing. When a SELECTION TERM is intended 
to INTERCEPT a communication, on the basis of the content of the communication, or because a 
communication is enciphered, rather than on the basis of the identity of the COMMUNICANT or the 
fact that the communication mentions a particular individual, the following rules apply: 

a. No SELECTION TERM that is reasonably likely to result, in the INTERCEPTION of 
communications to or from a U.S. PERSON (wherever located), 

may be used unless there is reason to believe that FOREIGN 
INTELLIGENCE will be obtained by use of such SELECTION TERM. 

b. No SELECTION TERM that has resulted in the INTERCEPTION of a significant number of 
communications to or from such persons or entities may be used unless there is reason to believe that 
FOREIGN INTELLIGENCE will be obtained. . 

c SELECTION TERMS that have . resulted or are reasonably likely to result in the 
INTERCEPTION of communications^© or from such persons or entities shall be designed to defeat, to 
the greatest extent practicable under the circumstances, the INTERCEPTION of those communications 
which do not contain FOREIGN INTELLIGENCE. 

5.2. (trCCO f Annual Review by DDO. 

a. All SELECTION TERMS that are reasonably likely to result in the INTERCEPTION ©f 
communications to or from a U.S. PERSON or terms that have resulted in the INTERCEPTION of a 
significant number of such communications shall be reviewed annually by the DDO or a designee. 

....... .b. The purpose of the review shall be to determine whether there is reason to believe that 

FOREIGN INTELLIGENCE will be obtained, or will continue to be. obtained, by the us® of these 
SELECTION TERMS. 

c. A copy of the. results of the review will be provided to the Inspector General and the 
General Counsel. 

. 5.3. (C - CCO) Forwarding of Intercepted Material. FOREIGN COMMUNICATIONS collected by 
the USSS may be forwarded as intercepted to NSA, intermediate processing, facilities, and 
collaborating centers’. 
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5,4. (S - CCO) Npnforetgn Communications, 

a. Cbmmuhjciti'orts^ between persons in the UNITED' STATES. Private radio 
communications solely between - parsons in the UNITED STATES inadvertently intercepted during the 
COLLECTION of FOREIGN COMMU N 1CATIONS wi 1 1 be promptly tfesfroyed uh! iss thf Attorney G enerei 
determines that the contents indicate a threat of death or serious bodiiy harm to arty person. 

b. Communications between U.S. PERSONS. Communications 'solely between U.S. 

PERSONS Will be 'treated as follows; " " 

{1} Communication solely between U.S. PERSONS inadvertently intercepted during 
the COLLECTION of FOREIGN COMMUNICATIONS will be destroyed upon recognition, if technically 
possible, except as provided in paragraph 5.4.d. below. 

(2) Notwithstanding, the preceding provision, cryptologic, data (e.g., signal and 
encipherment information) and technical communications data (e.g!, circuit usage) may be extracted 
and retained from those communications if necessary to: 



(a) Establish or maintain intercept, or 

(b) Mint mi ^'unwanted intercept, or 

(c) Support cryptologic operations related to FOREIGN COMMUNICATIONS. 

c. Communications, Involving an Officer or Employee of. the . U.S. Government 
Communications to or from any officer, or employee of the U.S. Government, or any state or local 
government, will, not .be - intentionally - .intercepted, inadvertent; INTERCEPTIONS of such 
communications (including those, between foreign TARGETS and U.S. officials) will be treated as 
indicated in paragraphs 5, 4.a. and b., above. 

d. Exceptions: ' Notwithstanding the provisions' of paragraphs 5.4,b. and c., the 
DIRNSA/CHCSS may Waive the destruction requirement for international communications containing, 
inter alia, the following types of information: 

(1) Significant FOREIGN INTELLIGENCE, or 



(2) Evidence of a crime or threat of death or serious bodily harm to any person, or 



(3) Anomalies that reveal a potential vulnerability to U.S. communications security. 
Communications for which the Attorney General or DIRNSA/CH CSS's waiver is sought should be 
forwarded to NSA/.CSSV Attn: Poi. 

5.5. (S-CCO) Radio Communications with a Terminal in the UNITED STATES. 



a. Ail radio communications that pass over, channels with a terminal in the UNITED 
STATES must be processed .through ‘a. computer scan diction^; ©if similar 1 device unless those 
communications occuribvir channels used exclusively by a FOREIGN POWER;. . ' . 



b. International common-access radio communications that pass over channels with a 
terminal in the UNITED STATES, other than communications, may 



be processed without the use of a computer scan dictionary or similar device if necessary to determine 
whether a channel contains communications of FOREIGN INTELLIGENCE interest which N5A may wish 
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to collect Such processing may not exceed two hours without the specific prior written approval of 
the DDO and, in any event, shall be limited to the minimum amount of time necessary to determine 
the nature of communications on the channel and the amount of such communications that include 
FOREIGN INTELLIGENCE. Once it is determined that the channel contains sufficient communications 
of FOREIGN INTELLIGENCE interest to warrant COLLECTION and exploitation to 'produce FOREIGN 
INTELLIG ENCEi a computer scan dictionary of similar device must be used for additional processing. 

c. Copies of ail DDO written approvals made pursuant to S.S.b. must be provided to the 
General Counsel and the Inspector General. 



ITI 



■ 6.1. tS-CCQ }, Retention of Communications .to, from or About U.S. PERSONS. 

a. Except as otherwise provided in Annex A, Appendix. 1, lection 4, communications to, 
from or -about U.S. PERSONS that are intercepted by the USSS may be retained in their original or • 
trartscri bed form oni y as fol I ows: 

(1) Unenciphered communications not thought to contain secret meaning may be 
retained for five years unless the DDO determines in writing that retention for a ionger period is 
required to respond to authorized FOREIGN INTELLIGENCE requirements. 

(2) Communications necessary to maintain technical data bases for cryptanaiytic or 
traffic analytic purposes may be retained for a period sufficient to allow a thorough exploitation and 
t© permit access to data that are, or are reasonably believed likely to become, relevant to a current or 
future- FOREIGN INTELLIGENCE requirement. Sufficient duration may vary with the nature of the 
exploitation and may consist of any period of time during which the technical data base is subject to, 
or of use in, cryptanalysis, if a U.S. PERSON'S identity is not necessary to maintaining technical data 
bases, it should be deleted or replaced by a generic term when practicable. 

b. Communications which could, be disseminated under Section 7, below Cue., without 
elimination of references to U.S. PERSONS) may be retained in their original or transcribed form. 

S.2. (s’CC& i Access. Access to raw traffic storage systems which contain identities of U.S. 
PERSONS must be limited toSIGiNT production personnel. 



SECTION 7 - DISSEMINATION 

7.1 . (C»CCO) Focus of SIGINT Reports. All SIGINT reports will be written so as to focus solely on 
the activities of foreign entities and persons and their agents. Except as provided in Section 7.2., 
FOREIGN INTELLIGENCE information concerning U.S., PERSONS must be disseminated in a manner 
which does not identify the U.S. PERSON. Generic or general terms or phrases must be substituted for 
the identity (e.g., "U.S. firm" for the specific name of a U.S. CORPORATION or "U.S, PERSON" for the 
specific name of a U.S. PERSON). Files containing the identities of U.S. persons deleted from SIGINT 
reports will be maintained for a maximum period of one year and any requests from S16 INT customers 
for such identities should be referred to P9S. PCfl 

. V 
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7.2. (C-CCQ) Dissemination of U.S. PERSON Identities. SIG1NT. reports may include the 
identification of a U.S. PERSON only if one of the following conditions is met and a determination is 
made by the appropriate approval authority that the recipient has a .need. for the identity for the 
performance of his official duties:. 

a. The U.S: PERSON has CONSENTED to the dissemination of cc^^u/iicatioris of, or about, 
him or her and has executed the CONSENT form found in Annex H of this UlSiD, of 

b. The' information' ls J PUBUCLY AVAILABLE (i.e., the information is derived from 

unclassified information available to the general pubiic), or .... 

c. The identity of the U.S. PERSON is necessary to understand thi FORiiGN INTELLIGENCE 

information or assess its impCrttance.,.The following nonexclusive list contains examples of the type of 
information that meet this standard: ' " r : 

( 1 ) FOREIGN POWER or AGENT OF A FOREIGN POWER. The information indicates that 
the U.S. PERSON is a . FOREIGN POWER or an AGENTOF A FOREIGN POWER. . 

(2) Unauthorised Disclosure of Classified Information. The information indicates that 
the U.S. PERSON may be engaged in the unauthorized disclosure of classified information. 

(3) international Narcotics Activity. The information Jndicates that the individual may 
be engaged in I rrtef n^orial;na'|wticj’ trafficking activities. (See Annex' .1 of this USSID for further 
information concerning individuals Involved In international narcotic? trafficking^ 

(4) Criminal Activity. The information is evidence that the individual may be involved 

in a crime that has been, is being, or is about to.be committed, provided that the dissemination is for 
law enforcement purposes. ‘ - ‘ ' ■. .• 

(5) Intelligence TARGET. The information indicates that the U.S. PERSON may be the 
TARGET of hostile intelligence activities of a FOREIGN POWER. 

(6) Threat to Saifety. Jl^nfonn^onjndl^t^ ihat^ idwdty’of 'the U.S. PERSON is 

pertinent to' a possible’tHriat to th# v safity of any person of Orgahisatidh, 1 Including those whp are 
TARGETS, vict^^or hostages of INTERNATIONAL TERRORIST organizations. Reporting units shall 
identify to P$5 any rep^ containing the identity of a U.S. PERSON reported under this subsection (S). 
Field reporting tof^shpuid' ^bl in the form" "of a CRiTlC<^l^.p^^ie 0bi' XA5) and include the 
report date-time-group"(DfG); product' serial number dnd‘ "of the U.S. 

PERSON’S identity. 

(7) Senior Executive Branch Officials. The identity is that of a senior official of the 
Executive Branch of the U.S. Government. In this case only the official's title will be disseminated. 
Domestic political or persona! information on such individuals wilt be neither disseminated nor 
retained. 
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7 . 3 . (C“CCQ) Approval Authorities. Approval authorities for tbs release of identities of U.S. 
persons under Section 7 are as follows: 

a: DIRN5ACHCSS. DIRNSA/CHCSS must approve dissemination of: 

(1) . The Identities of any senator, congressman, officer, or employee of the Legislative 

Branch of the U.S. Government . ' . 

( 2 ) The identity of any person for law enforcement purposes. 

b. Reid Units and MSA Headquarters Elements. All SIGINT production organisations are 
authorised to disseminate the identities of U.S. PERSONS when: 

. • (1) The identity is pertinent to the safety of any person or organisation. 

(2) The identity is that of a senior official of the Executive Branch. 

(3) The U.S. PERSON has CONSENTED under paragraph 7.2.a. above. 

c. DOO and Designees. 

(1) In aii other cases, U.S. PERSON identities may be released, only with the prior 
approval Deputy Director foi^Operations, the Assistant Deputy Director for Operations, the 
Chief, •P95, the Deputy Chief, WSjhSyih their absence, the Senior' Operations Officer of the, National 
SIGINT Operations' Center." The'DDO or ADDO shall review. all U.S. identities released by these 
designees as soon as practicable after the release is made. 

(2) For law enforcement purposes involving narcotics related information, D1RNSA has 
granted to the DDO authority to disseminate U.S. identities. This authority may not be further 
delegated. 

7.4. (SJ) Privileged Communications and Criminal Activity. All proposed disseminations of 
information constituting U.S. PERSON, . privileged . communications (e.g., , attomey/dient, 
doctpf/pstient) and, ail information concerning criminal activities or criminal or judicial proceedings 
in the UNITED STATES must be reviewed by the Office of Genera! Counsel prior to dissemination. , 

7.5. (U) Improper Dissemination. If the name of a.U.S. PERSON, is improperiy disseminated, 
the incident should be reported to P@5 within 24 hours of discovery of the error. 

Fbx ' 
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SECTIONS -RESPONSIBILITIES 

8.1. ' (U) Inspector General. The Inspector General shall: 

. ffl a.. Conduct regular inspections and perform general oversight of NSA/CSS activities to 
ensure compliance with this USSID. ■" 

b. Establish procedure? for/eporting by Key Component and Field Chiefs of their activities 
and'pfactices for oversight purposes. : 

x. Report to the DIRNSA/CHCSS, annually by It October, concerning NSA/CSS compliance 
with this USSiD. 

d. Report quarterly with the DIRNSA/CHCSS and ' General Counsel to the President's ‘ 
Intelligence Oversight Board through the Assistant to the Secretary. . of Defense (Intelligence 
Oversight). 

8.2. (U) General Counsel.. The General Counsel.sha!!: 

a. Provide legal .advice and assistance to all elements of the USSS regarding SiGINT 
activities. Requests for legal advice on any aspect of these procedures should be sent by CRITICOMM 
to DDi XDI, or by NSA/CSS secure telephone 963-3121, or 

b. Prepare and process ail. applications for Foreign intelligence Surveillance Court orders 
and requests for Attorney General' approvals required by these' procedures. 

c Advise the Inspector General in inspections and oversight of USSS activities. 

d. Review and assess for legal implications as requested by the DIRNSA/CHCSS, Deputy 
Director, Inspector Genera! or Key Components Chief, ail new major requirements and internally 
generated USSS activities. 

e. Advise USSS personnel of new legislation and case law that may affect USSS missions, 

functions, operations, activities, or practices.. ... ... , ... 

f. Report as required to the Attorney General "aha the President's intelligence Oversight 
Board and provide copies, of such reports to the Di RNWCB CSS and affected agency elements. 

g. Pm^'il^ijle^.^^an^ Do^jntelljgbnc® component .Jew;. aufHbfity to use signals is 
described in Procedure" 5, Part' Of D©DS;>46i1-R, for periods in'iscess pf fodays'in the development, 
test, or calibration of ELECTRONIC SURVEILLANCE equipment and other equipment that can intercept 
communications. 



8.3. (U) Deputy Director for Operations (DDO). The DDO shaii: - 
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a. Ensure that all SIGINT production personnel understand and maintain a high degree of 
awareness and sensitivity tb the requirements of this USSID. 

b. Apply the provisions of this USSID to all SIGINT production activities. The DDO staff 

focal point for USSID 1 i matters i$P65 (use CRITICOMM DDI XAO). 

fox 

c. Conduct necessary reviews of SIGINT production activities and practices -to ensure 
consistency with this USSID. 

d. Ensure that ail new major requirements levied on the USSS or internally generated 
activities are considered for review by the General Counsel. Aii activities that raise questions of law or 
the proper interpretation of this USSID must be reviewed .by the General Counsel prior to acceptance 
or execution. 

8.4. (U} All Elements of the USSS. AM elements of the USSS shall: 

a. Impiementthisdirectiveuponreceipl 

b. Prepare new procedures or amend or supplement existing procedures as required to 
ensure adherence to this USSi.D. A copy of such procedures shall be forwarded t© NSA/CSS, Attn: P©5. Pox, 

c. Immediately inform the DDO of any tasking or instructions that appear to require 
actions at variance' with this USSID. 

d. Promptly report to the NSA Inspector General and consult with the MSA General 
Counsel on all activities that may raise a question of compliance with this USSID, 



SECTION 9 - DEFINITIONS 



9.1. -(5-€€©) AGENT OF A FOREIGN POWER means: 

a. Any person, other than a U.S. PERSON, who: 

(1) Acts in the UNITED STATES as an officer or employee of a FOREIGN POWER, or as a 
member .of a group engaged in INTERNATIONAL TERRORISM or activities in preparation therefor; or 

(2) Acts for, or on behalf of, a FOREIGN POWER that engages in clandestine 
intelligence activities in the UNITED STATES contrary to the interests of the UNITED STATES, when the 
circumstances of such person’s preserve in the UNITED STATES indicate that such* person may engage 
in such activities in the UNITED STATES, or when such person knowingly aids or abets any person in 
the conduct of such activities of knowingly conspires with any person to engage in such activities; or 

b. Any person, including a U.S. PERSON, who: 

(1) Knowingly engages in clandestine intelligence gathering activities for, or on behaif 
of, a FOREIGN POWER, which activities involve, or may involve, a violation of the criminal statutes of 
the UNITED STATES; or 
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(2) Pursuant to the direction of an intelligence service or network of a FOREIGN 
POWER, knowingly engages in any other clandestine intelligence activities for, or on behalf of, such 
FOREIGN POWER, which activities involve or are about to involve, a violation of the criminal statutes 
of the UNITED STATES; or 

(3) Knowingly engages in sabotage or INTERNATIONAL TERRORISM, ©r activities that 

are in preparation therefor, for or on behalf of a FOREIGN POWER; or . . 

■ (4) Knowingly aids or abets any person in the- conduct of‘ activities described in 
paragraphs 9,1 .b.(1) through (3) or knows rigly conspires with any person to engage ih those activities. 

c. For all purposes other than the conduct of ELECTRONIC SURVEILLANCE as defined by 
the Foreign Intelligence Surveillance Act (see Annex A), the phrase "AGENT OF A FOREIGN POWER" 
also means any person; including U.S.. PERSONS outside the UNiTEO.STATESv f who are officers or 
employees of a FOREIGN POWER, or who act unlawfully for or pursuant to the direction of a FOREIGN . 
POWER, or who are in contact with or acting in collaboration ‘with an intelligence dr security service 
of a FOREIGN POWER for the purpose of providing access to information or material classified by the 
UNITED STATES Government and to which the person has or has had access. The mere fact that a 
person’s activities may benefit or further the aims of a FOREIGN POWER is not enough to bring that 
person under this provision, absent evidence that the person is taking direction from or acting in 
knowing concert with a FOREIGN POWER. 

9.2. ~f €) COLLECTION ^ means intentional tasking or SELECTION: of identified nonpublic 
communications for subsequent processing aimed at reporting or retention as a file record. 

9.3. (U) COMMUNICANT means a sender or intended recipient of a communication. 

9.4. (U) COMMUNICATIONS ABOUT A U.S. PERSON are those in which the U.S. PERSON-is 
identified in the communication. A U.S; PERSON is identified when the person’s name, unique title, 
address, or other personal identifier is revealed in the communication in the context of activities 
conducted by that person or activities conducted by others and related to that person. A mere 
reference to a product by brand name or manufacturer's name, e.g., "Boeing 707" is not an 
identification of a U.S. person. 

9.5. (U) CONSENT, for SIGJNT purposes, means an agreement by a person or organization to 

permit the USSS to take particular actions that affect the person or organisation. Ah agreement by an 
organization with the* National • Security Agency to permit COLLECTION :. of information shall, be 
deemed valid CONSENT if given on behalf of such organization by an official or governing body 
determined by the General Counsel; National Security Agency, to have, actual or apparent authority 
to make such an agreement. \ “ ' ' . : i- - •-* " 

9.5. (U) CORPORATIONS, for purposes of this USSID, are entities legally recognized as separate 
from the persons who formed, own, or run them. CORPORATIONS have the nationality of the nation 
state under whose laws they were formed. Thus, CORPORATIONS incorporated under UNITED STATES 
federal or state law are U.S. PERSONS. 

9.7. (U) ELECTRONIC SURVEILLANCE means: 

a. in the case of an electronic communication, the acquisition of a nonpublic 
communication by electronic means without the CONSENT of a person who is a party to the 
communication. 
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b. in the css® of a nonelectronic communication, the acquisition- of a nohpublic 
communication by-eiectronic means without the CONSENT of a person who is visibly present at the 
place of communication. 

c. The term ELECTRONIC SURVEILLANCE does not include the use of radio direction 
finding equipment solely to determine the location of a transmitter. 

9.8. (Q FOREIGN COMMUNICATION means a communication that has at least one 
COMMUNICANT outside of the UNitiD STATES, or. that is entirety among FOREIGN ROWERS or 
between a FOREIGN POWER and officials of a FOREIGN POWER, but does not include communications 
intercepted by ELECTRONIC SURVEILLANCE directed . at premises in the UNITED STATES used 
predominantiyfor residential purposes.- - 

9.9. (U) FOREIGN INTELLIGENCE means information relating to the capabilities, intentions, - 
and activities of FOREIGN POWERS, organizations, or persons, and for purposes of this USSID includes 
both poiitive FOREIGN INTELLIGENCE and counterintelligence. 

9.10. (U) FOREIGN POWER means: 

a. A foreign government or any component thereof, whether or not recognized by the 
UNITEDSTATES, 

b. A faction of a foreign nation or nations, not substantially composed of UNITED STATES 

PERSONS, 



c An entity that is openly acknowledged by a foreign government or governments to be 
directed and controlled by such foreign government or governments, 

d. A group engaged in INTERNATIONAL TERRORISM or activities in preparation therefor, 

e. A foreign-based political organization, not substantially composed of UNITED STATES 
PERSONS, or 

f . An entity that is directed and controlled by a foreign government or governments. 

9.11. (U) INTERCEPTION means the acquisition by the USSS through electronic means of a 
nonpubiic communication to which it is not an intended party, end the processing of the contents of 
that communication into ah intelligible form, but does not include the display of signals on visual 
display devices intended to permit the examination of the technical characteristics of the signals 
without reference to the information content carried by the signal. 
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9.12. (U) INTERNATIONAL TERRORISM mtansactivities.tiTat: 

a. Involve violent acts or acts dangerous to human life that are a violation of the criminal 

laws of the UNITED STATES orof any State, or, that would - be a criminal violation if committed within 
the jurisdiction of the UNITED STAtES or any State, and "• • 

b. Appearto be intended: 

(1) to intimidate' or coerce a civilian population, 

(2) to infl uence the policy of a government by intimidation or coercion, or 

(3) to affect the conduct of a government by assassination or kidnapping, and 

c. Occur totally. outside the UNITED STATES, or transcend national boundaries in terms of 

the means by which they are accomplished, the persons they appear intended to coerce or intimidate, 
or the locale in which their perpetrators, operate or seek asylum: .. 

... 9.13. (U) PUBLICLY: AVAILABLE. INFORMATION means information that has been published. or 
broadcast for general public consumption, is available on request to a member of the general public, 
has been seen or heard by a casual observer, or is made available at a meeting open to the general 
public.' ~ ■ . .. - • r 

means the 
telephone 

number,) into a computer scan dictionary or manual scan guide for the 

purpose of identifying messages of interest and isolating them for further processing. 

9.15. ~f e) S ELECTION TERM means. the composite of individual. terms. used to. effect or defeat 

SELECTION of particular, communications for the purpose of INTERCEPTION. comprises the entire 
term or series of terms so used, but not any seg regable term contained therein, it applies to both 
electronicand manual processing. - • 

3.16. (U) TARGET, OR TARGETING: See COLLECTION. 

9.17. (U) UNITED STATES, when used geographically, includes the 50 states and the District of 
Columbia, Puerto Rico, Guam, American Samoa, the U.S. Virgin Islands, the Northern Mariana Islands, 
and any other territory or possession over which the UNITED STATES exercises sovereignty. 

9.18. -^-UNITED STATES PERSON: 

a. A citizen of the UNITED STATES, 

b. An alien lawfully admitted for permanent residence in the UNITED STATES, 

c. Unincorporated groups and associations a substantial number of the members of 
which constitute a. or b. above, or 

d. CORPORATIONS incorporated in the UNITED STATES, including U.S. flag 
nongovernmental aircraft or vessels, but not including those entities which are openly acknowledged 
by a foreign government or governments to be directed and controlled by them. 



9.14. — CO-SELECTION,. as applied to, ma nual and. e lectronic processing activities, 
intentional insertion of a 
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e. The following guidelines apply in determining whether a person is a U.S. PERSON: 

(t) A person known to be currently in the United States will be, treated as a U.S. 
PERSON unless that person. is reasonably identified, as an alien Who' has not been admitted for 
permanent residence or if the nature of the person's communications ©r other indicia in the contents 
or circumstances of such communications give rise to a reasonable belief that such person is not a U.S. 
PERSON. 



(2) A person known to be currently outside the UNITED STATES; or whose location is 
not known, wiii not be treated as a U.S. PERSON unless such person is reasonably identified as such or 
the nature of the person's communications or other indicia in the contents or circumstances of such 
communications give rise to a reasonable belief that such person is a U.S. PERSON. 

<3) A person known to be an alien admitted for permanent residence may be assumed 
to have tost status as a U.S. PERSON if the person leaves the UNITED STATES and it is known that the 
person is not in compliance with the administrative formalities provided by law (SU.S.C. Section 1203) 
that enable such persons to reenter the UNITED STATES without regard to the provisions of law that 
would otherwise restrict an alien's entry into the UNITED STATES. The failure to follow the statutory 
procedures provides a reasonable basis to conclude that such alien has abandoned any intention of 
maintaining status as a permanent resident alien. 

(4) An unincorporated association whose headquarters are located outside the 
UNITED STATES may be presumed not to be a U .S. PERSON unless the USSS has information indicating 
that a substantial number of members are citizens of the UNITED STATES or aliens lawfully admitted 
for permanent residence. ' 



(5) CORPORATIONS have the nationality of the nation-state in which they are 
incorporated. CORPORATIONS formed under U.S. federal or state law are thus U.S. persons, even if 
the corporate stock is foreign-owned. The only exception set forth' above. is CORPORATIONS which 
are openly- acknowledged to bt directed and controlled by foreign governments. Conversely, 
CORPORATIONS incorporated in foreign countries are not U.S. PERSONS even if that CORPORATION is 
a subsidiary of a U.S. CORPORATION. ' 

(S) Nongovernmental ships and aircraft are legal entities and have the nationality of 
the country in which they are registered. Ships and aircraft fiy the flag and are subject to the law of 
the* r place of regi stration. 
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AMNEX'A 




SECTION 1 -PURPOSE AND APPLICABILITY 



t.t.. (U) The Foreign Intelligence. Surveillance Act (the Act) governs the conduct of certain 
electronic surveillance activities within the United States to collect foreign intelligence information. 
A compete, copy. of. the Act is. found at Annex B to NSA/CSS directive;- 10^30. The Act covers the 
intentional .collection of. the communications of a particular, known U.S. person who is in the United 
States, all wiretaps in the United States, the acquisition of certain: radio communications where all 
parties to that communication are located in the United States, and the monitoring of information in 
which there is a reasonable expectation of privacy. The Act requires. that all such surveillances be 
directed only at foreign powers and their agents as defined by the Act and that ail such surveillances 
be authorized by the United States Foreign Intelligence Surveillance Court, or in certain limited 
circumstances, by the Attorney General. 



2. 1 . (U) Procedures and standards for securing Court orders or Attorney General certifications 
to conduct electronic surveillances are set forth in the Act." Requests for such orders or certifications 
should be forwarded by the appropriate Key Component through the NSA General Counsel to the 
Director, MSA/Chief, CSS and should be accompanied by a statement of the facts and circumstances 
justifying a belief that the target is a foreign power or an agent of a foreign power and that each of 
the facilities or places at which the surveillance will be directed are being used/or are about to be 
used, by that foreign power or agent, if the proposed surveillance meets the requirements of the Act 
and the Director approves the proposal, attorneys in the Office of the General Counsel will draw the 
necessary court application or request for Attorney General certification. 



3.1 . (S*CCO) Surveillances authorized by the Act are required to be carried out in accordance 
with the Act and pursuant to the court order or Attorney Genera! certification authorising that 
particular surveillance, in some cases, the court orders are tailored to address particular problems, 
and in those instances the MSA attorney will advise the appropriate NSA offices of the terms of the 
court's orders. In most cases, however, the court order will incorporate without any changes the 
standardized minimization procedures set forth in Appendix 1 . 



SECTION 2 - GENERAL 



SECTION 3 - MINIMIZATION PROCEDURES 
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SECTION 4- RESPONSIBILITIES 



4.1. (U) The General Counsel will review all requests to conduct electronic surveillances as 
defined by the Act, prepare' all applications and materials required by the Act, and provide pertinent 
legal advice and assistance to all elements' of the United States SiGINT System. 

4.2. (U) The Inspector General will conduct regular inspections and oversight of all SiGINT 
activities to assure compliance with this Directive. 

4.3. (U) All SIGINT managers and supervisors with responsibilities relating to the Act will 
ensure that they and their personnel are thoroughly familiar with the Act, its implementing 
procedures, and any court orders or Attorney General certifications pertinent to their mission. 
Personnel with duties related to the Act will consult the General Counsel’s office for any required 
legal advice and assistance or training of newly assigned personnel: Appropriate, records wilt 'be 
maintained demonstrating compliance with the terms of all court orders and Attorney Genera! 
certifications, and any discrepancies in that regard will be promptly reported to the offices of the 
General Counsel and Inspector General. 
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APPENDIX 1 

Standard HSnimizatten Procedures for 
MSA Elecfrdraio Surveillances 



Section 1 — Applicability and Scope Section A-1/2 

Section 2 — Definitions A-1/2 

a. Acquisition A-1/2. 

b. Communications concerning a U.S. Person A-1/2 

c. Communications ot a U.S. Person A-1/2 

d. Consent ' A-1/2- 

e. Foreign communication [Domestic Communication] A-1/2 

f. • identification of a U.S, Person A-1/3 

g. Processed dr Processing ‘ A-1/3 

h. Pubftciy available information A-1/3 

i. Technical data base A-1/3' 

j. U.S. person A-1/3 

Section 3 — Acquisition and Processing- Genera! A-1/3 

a. Acquisition A-1/3 

b. Verification . A-1/3 

c. Monitoring, Recording, and Processing ■ A-1/4 

d. - U.S; Persons Employed by the Foreign Power A-1/4 

e. Destruction of Raw Data A-1/4 

f. Non-Pertinent Communications A-f/5 

g. Change in Target’s Location or Status A-1/5 

Section 4 — ■ Acquisition and Processing —Special Procedures A-1/5 

a. C&lie&ibn Against Residential Premises A-1 /5 

b;. A-1/S .' 

Section 5 — Domestic Communications A-1 /6 

a. _ Dissemination . A-1/S 

b. Retention A-1/6 

Section 6 — Foreign Communications of or Concerning U.S. Persons A-1/7 

a. Retention . A-1/7 

b. Dissemination ‘ A-1/7 

Section 7 — Other Foreign' Communications A-1 /8 

Section 8 — Collaboration with Foreign Communications A-1 /8 
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FOREIGN INTELLIGENCE SURVEILLANCE COURT 



WASHINGTON, DC - • 



STANDARDIZED MINIMIZATION 
PROCEDURES FOR NSA ELECTRONIC SURVEILLANCES 



Pursuant to Section 1 01 (h) of the Foreign intelligence Surveillance Act of 1978 {hereinafter “the 
Act”), the following procedures have been adopted by the Attorney General and shall be followed by tine NSA 
in implementing this electronic surveillance: (U) 



SECTION 1 - APPLICABILITY AND SCOPE (U) 



These procedures apply to the acquisition, retention,' use, and dissemination of non-pubiiciy 
available information concerning unconsenting United States persons that is collected in the course of elec- 
tronic surveillance as ordered by the United States Foreign Intelligence Surveillance Court under Section 
102(b) or authorized by Attorney General Certification under Section 102(a) of the Act. These procedures 
also apply to non-United States persons where specifically indicated. (U) 



SECTION 2 - DEFINITIONS (U) 

In addition to the definitions in Section 101 of the Act, the following definitions shall apply to these 

procedures: 

(a) Acquisition means the collection by NSA through electronic means of a nonpubiic commu- 
nication to which it is not an intended party. (U) 

(b) Communications concerning a United States person include ail communications in which a 
United States person is discussed or mentioned, except where such communications reveal only publicly 
available information about the person. (U) 

(c) Communications of a United States person include all communications to which a United 
States person is a party. (U) 

(d) Consent is the agreement by a person or organization to permit the NSA to take particular 
actions that affect the person or organization. To be effective, consent must be given by the affected person or 
organization with sufficient knowledge to understand the action that may be taken and the possible .conse- 
quences of that action. Consent by an organization shall be deemed valid if given bri behalf of the organization 
by an official or governing body determined by the General Counsel, NSA to have actual or apparent authority 
to make such an agreement. (U) 

(e) Foreign communication means a communication that has at least one communicant outside 
of tiie United, States, or that is entirely among: 

(1) foreign powers; 

(2) officers and employees of foreign powers; or 

(3) a foreign power and officers or employees of a foreign power. 

All other communications are domestic communications. (S-GCO) 
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